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// Some assumptions coming into the talk 


9 By now, for most people coming to a talk like this the 


cloud is a given: Cloud Good d. 
e By now, for most people coming to a talk like this 
DevOps practices are a given: DevOps Good d. 


e Sowe are going to talk about a specific responsibility 
within Cloud DevOps which is Platform Engineering / 


e Platform Engineering Good ? 


// Platform Engineering 


Whats is it? 


“Platform engineering emerged in response to the 
increasing complexity of modern software 
architectures. Today, non-expert end users are often 
asked to operate an assembly of complicated arcane 
services,” 


Says Paul Delory, VP Analyst at Gartner. 


“To help end users, and reduce friction for the valuable 
work they do, forward-thinking companies have begun 
to build operating platforms that sit between the end 
user and the backing services on which they rely.“ 


// What defines Operational Maturity? 


Its not complete, but let's try this definition. Operational 
Maturity is comprised of: 


δω 


A the strict definition of what a non-failing system looks 
like. 

Failure Scenarios you test against. 

Failure modes and their indicators 

Indicators of the time, cost and end-state of returning 
to anon-failing state. 

Handling failures often 


{ή How do you achieve Operational Maturity? 


i 


Multi-layered observability that tries to capture both 
positive and negative signals (system is working within 
defined SLI parameters). 

Automated failover and mitigations for some of the 
negative signals 

People trained to observe these signals and the 
availability of said people 

Processes to handle unknown failure modes 

Run a lot of tests, often - and not only the automated 
ones 


// A segway about me 


And a short anecdote 


Hi, | am Ori 
Pekelman, One of 


the founders of 
Platform.sh 


M | am now Chief Strategy 

| Officer. | used to be 
Product. Also | like serious 
titles. 


// Lam also a Really. 


developer 


CD overview H Repositorios mm fE Projects D Packages Yt Stars mm 


* You gotta love stable diffusion 
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// Startups are a 
wild thing, for 
atimelran 
marketing... 


* Apex Predators having a cuteness competition 


When you are 
a developer ... 
and you run 
marketing... 


public ShowChildren 


options = new List<SelectOption>(); 
Schema.DescribeSobjectResult r = Account.SobjectType.getDescribe(); 
List<Schema.childRelationship> c = r.getChildRelationShips(); 


for(schema.childRelationship x:c){ 
String name = ' '+x.getChildSObject(); 
SelectOption op = new SelectOption(name, name); 
options.add(op); 


// When 
SalesOps is 
not your day 
job. 


YOU MEAN TO TELE ME 


MARKETING AUTOMATION 
DOESN:TIAUTOMATE 
MARKETING 


// Back to the actual talk 


And to the voyage to Cloud Nativity 


/! Six years ago I 
did the same 
presentation 
here 


Symfonyawe 


At the time the title 
was “How to build 
cloud native 
applications” and it 
was in French but it 
was basically the same 
subject. 
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/! Basically, how 
and why do 
we go from... 


CDN 


To... 


Entry Point 
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App! | App2 | App3 


Web Server eb Server 
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CACHE 


And how to keep Search Engine 


things simple. Message Queue 


| told things about Distributed File-System 


Infrastructure as Code Container Run-Time 


Linux 


Underlying Cloud 


// Running programs on 
computers. 


// Computers are 
simple. 


Cpu or Systems unit ==} 


CID OC III] [ID 5551 


Keyboard — 


From: David Cushman's The Simplest Possible Tutorial.. 
Understanding How Computers Work 


ΠΕΝ 


CPU and Memory 

Disk 

Networking 

Processes 

Names that map to processes 
exposed on a network. 


// You can add a 
couple of 
things to be 
more 
complete. 


Using CPU memory and disk and 
exposing themselves for the 
network that will give them a name 
Processes are the result of source 
code 

Source code needs to be built in 
order to run 


The non-simple part 
is running programs 
written by a bunch 
of humans using 
third party libraries 
that change witha 
certain level of 
quality within a 
defined rhythm of 
change when there 
are going to be 
many uses to your 
program 


17 Infrastructure as 1. We are developers... 
2. It's just code... 
code to the D 


We can add it under Git control 
rescue add some tests... 

4. And every time the code 
changes we just run it through 
a pipe-line... 


// The Business 
Domain of 
Infrastructure 
as Code 


The same way SalesForce Apex 
code manages leads and 
opportunities 


laC code manages ... well code, 
and its relationship to the 
underlying infrastructure 


/! In six years 
what “cloud 
native” means 
changed a lot, 
the “business 
domain” 
evolved. 


In 2006 AWS was: S3, EC2, 505 


By 2009 SimpleDB, Elastic IPs, EBS, Cloud 
Front, Amazon Elastic MapReduce, ELB, VPCs, 
RDS 

In 2022 there are more than 


By 2012 SNS, CloudFormation, Route 53, Elastic 


Beans DB, IAM, Glacier, 
RedShi 

distinct 
By 2015 ClougHSM, Cloud Trail, Kinesis, Aurora, 


KMS, FESS ambda, CodePipeline, API Gateway, 
Elastic Search, Inspector, Snowball, ECR, ML 
Platform, IOT Platform, Auto Scaling, ACM, 
EFS.... Just from AWS. 


/! Six years ago 


| contrasted LAMP to what a “modern 
architecture” would look like. ~ 4 Concepts 


Adding into the mix an Edge Layer, 
Multi-tiered Caching, a message queue, 
Redundant Storage and Replicated 
databases, and a Converged Storage 
Layer. 

d *8 Concepts 
All with an integrated CI/CD, backed by 
GitOps 
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// Platform Engineering 


Whats is it? 


Gartner expects that by 2026, 80% of software 
engineering organizations will establish platform 
teams as internal providers of reusable services, 
components and tools for application delivery. 


Platform engineering will ultimately solve the central 
problem of cooperation between software 
developers and operators. 


// Platforms Vs DevOps 


What is the E Contrast this to what Gartner said about DevOps in 
difference 2016: 

between DevOps 

and Platform Organizations with agile development will be slower 
Engineering? to embrace DevOps across the entire application life 


cycle. Cultural resistance and low levels of process 
discipline will create significant failure rates for 
DevOps initiatives, particularly when waterfall 
processes are still a dominant portion of the 
development portfolio. Nevertheless, a majority of 
enterprises attempting to scale agile over the next 
five years will recognize the need for DevOps 
initiatives. 


// What “Platforms” mean also changed. 


Platforms in 2008 needed In 2016 they needed to do 
to basically handle: this, as abare minimum: 


Apache 
PHP 
MySQL 


ΠΕΠ Den ued pe 
ontainer Run-Time 
Linux 


Underlying Cloud 


And that is before you run any machine-learningy things at the edge. Before 
you get into consideration dynamic scaling and handling new forms of DDOS 
attacks. Before you consider your carbon footprint. Before you consider cost. 


/! DevOps As a Job Desc, DevOps as a culture 


Infrastructure-as-code 
Infrastructure Management 
Pipeline automation 


Platform Building DevOps 


responsibilities 


Continuous Integration 
Continuous Testing 
Continuous Monitoring 
Pipeline automation 
Continuous Delivery 


DevOps 


Implementation 
Modes 


CI/CD Practices 


Collaboration 
Common Paradigmes 
Knowledge Sharing 


DevOps Culture 


// DevOps vs Platform Engineering 


E 


What is the DevOps is a philosophy, a cultural shift that merges 
difference operations with development and demands a linked 
between DevOps toolchain of technologies to facilitate collaborative 
and Platform change. 


Engineering? 


Platform Engineering is solving all of the huge 
problems that arose as soon as the above became 
"use Kubernetes" and a dozen or so tools to "simplify 
Kubernetes". 


But it's also back to 2008 and the promises the cloud 
initially had about simplicity. 


// Roles and responsibilities 


Developers 


Code 


Continuous 
Integration 


Deployment 


Incident 
Management 


Performance 
Management 


Infrastructure 
Management 


Cost Management 


// In six years 
what "cloud 
native” means 
changed a lot 


Developers 


Well, not that much changed for us. 
We still just write code. And tests. In 
whatever order. 


// Our job stayed 
the same. But 
I can't say 
their's became 
any easier 


©) GitHub Actions | Travis ci ᾧ 
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Keep Learning 


Management and Monitoring 


// In six years 
what "cloud 
native” means 
changed a lot 
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Sys Admin DevOps SRE 


“On the other side” even the titles of the 
people actually making it happen changed 
quite a bit ... 


// Platform 
Engineer 


// Operational 
maturity is 
not about 
green 


And it’s not about not 
having failures. 


Everything fails. All 
the time. This is cloud 
and this is software. 


Everything is 
horrendously broken. 


About This Site 


ough https;//support platform.sh 


Australia (au.platform.sh) 
Australia East (au-2.platform.sh) 7 
Canada (ca-1.platform.sh) 
Europe (France) (fr-Lplatform.sh) 7 
Europe (France 2) (ovh-fr-2 platform sh) 
Europe (France 3) (fr-3.platform.sh) 
Europe (France 4) (fr-4.platform.sh) 
Europe (Germany) (de-2.platform.sh) 
Europe (West) (eu.platform.sh) 
Europe (West 2) (eu-2.platform.sh) * 
Europe (West 4) (eu-4.platform.sh) 
Europe (North 1) (eu-5.platform.sh) 
United Kingdom (uk-.platform.sh) 
USA (East) (us.platform.sh) 
USA-2 (East 2) (us-2.platform.sh) 
USA-3 (West 2) (us-3 platform.sh) 
USA-4 (East 1) (us-4.platform.sh) 
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it incident-63 ~ Support - SEVO Incident - 63 | AWS DISASTER RECOVERY TEST - a hypothetical region is unavailable. 


/ / It's a bo ut Tip: Try _#  F tosearchthischannel x 
© incident-63 (archived) 


red @blamelessbot created this channel on November 9th. This is the very beginning of the © incident- 
63 (archived) channel. 


Wednesday, November 9th + 


00:10 blamelessbot APP joined £ incident-63. € eon 


00:10 blamelessbot APP set the channel topic: Support - SEVO Incident - 63 | AWS DISASTER RECOVERY TEST - a 
hypothetical region is unavailable. 


* Pinned by blamelessbot 


Havi nga lot of 00:10 blamelessbot 'APP 

a B Incident: 63 
a utomati on for the AWS DISASTER RECOVERY TEST - a hypothetical region is unavailable. 
normal kind of red. Description 


A region is down and has been determined to be unrecoverable due to a ceph issue. 
We're proceeding to do a full recreation of the region. 


Disks frying. Hosts es Phd le | 
à Support su #_incident-63 
d yl n g τ Severity Status 
SEVO Resolved 
e Google Meet 
And having people nenne 


that can handle a new Team 
Commander: MM 

shade of red. Operations ο, ΘΙ 
Communication Lead: 

You know, unknown γενν 

unknowns. 


WE TOOK THE HOSTAGES, 
SECURED THE BUILDING, ANO 
CUT THE COMMUNICANON 

LINES LIKE YOU SAID. 


BUT THEN THIS GUY CLIMBED UP 
THE. VENTILATION DUCTS AND WALKED 
ACROSS BROKEN GLASS, KILLING 
ANYONE WE SENT TO STOP HIM. 


NO, HE IGNORED THEM. 
HE JUST RECONNECTEO 
THE CABLES WE CUT 
MUTTERING SOMETHING 
ABOUT “UPTIME”. 
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x 
SHIT, VERE 
DEALING WITH 
A SYSADMIN, 


// Ah, is this the actual 
talk yet? 


Yes, almost .... 


// Standard 
deployment 
workflow 


Writing 
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Standard 
development 
workflow 
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What you do = 


δυ]ιοιοικολὸ 


Standard 


deployment 
workflow 


// Building 
in-house 


Each phase requires people, 
configuration and tooling to 
make it run efficiently and 
consistently. 


And now you need to do it twice. 


μα 


5 Standard 
= | development 
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workflow 
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What you do = 
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// Not all code is 
equal and 
semantics ‘symfony’ 
matter ‘php:8.1° 


*db:postgresql' 


"shared:files/local” 


: postgresql:13 
: 2048 


T 


// And it's not 


SC 
H db docker symfony 
just about NE 
e 
verbosity = db-data:/var/lib/mysql 
"yes' 
- dev 
When the infrastructure is a : php 
: docker symfon 
dependency the contract . — m τ 
matters. - "8741:80" 
Are PORTS part of my - ./php/vhosts:/etc/apache2/sites-enabled 
software definition? Part of μα ο ον 
i WE always 
the infrastructure definition? : 
- dev 


Is it Apache that is my 
dependency or a reverse 
HTTP ?Am | locked to minor 
versions? To major ones? 


= : Setting up LAMP Website 
: symfony 
B LESSIVE 


// How 
reproducible | 
are you? Pa 


- mariadb-server 

- php 

- php-mysql 
latest 


= : latest version of all required packages installed 


= : Copy mime.types file 


: /etc/mime.types 
The style of code, its : /etc/httpd/conf/mime.types 


semantics are going to have 


Ρ - & Into! bled d d 
a huge impact down the oe eee 


ῃ SCHER 
line. MES 
started 


Descriptive and imperative 


= : mariadb enabled and running 


styles are not the same. 


a] 
And their relationship to à een 
version control is 


= : test the webpage/website we have setup 
paramount. : 
: http://((ansible hostname}}/index.php 

& 200 


// What happens 
when we 
change ... ‘symfony’ 


" [omo 8 {δ} ο. dl. " 
*db:postgresql' 
"shared:files/local” 


: postgresql:13 
: 2048 


‘symfony’ 
“php:8.2’ 


*db:postgresql' 


"shared:files/local” 


postgresql:14 
2048 


Platform.sh delivers a framework 


(Platform-as-a-Service) to build, run, and 
effortlessly scale web applications. 


What is Platform.sh? 


Platform.sh is a multi-cloud software orchestration solution that 
encapsulates the full life-cycle of a software project. Including all of the 
dependencies, from the first lines of code to run & scale. 


It targets the specific use-case of organizations that manage a large 
number of web applications and web sites. 

It is an abstraction of everything software needs in order to run. 

It is a contract that explains how a particular piece of software can be 
run. It is a control plane and a single pane of glass. 


Its ambition is to help developers develop, deploy and manage with ease 
not only singular projects but also fleets of applications. 


You still want to build a platform? 


A note about APIs, system boundaries and the double control plane. 


Project Control Plane Infrastructure Control Plane 


Remember this? 


Printer 


Monitor 
or 
Screen 


Keyboard — 


Correct system boundaries are key. 


The Program 


Knows everything about the 
project and its life-cycle. 
The Platform 
Describes its *minimal* 
infrastructure deps. 


The Computer 


Knows everything about hosts, 
storage and containers. 


To the growing complexity, the answer has been: more tools and greater complexity. 


App Definition and 


A disconnected patchwork of tools. 
Development 


Each with its own learning curve. 


aun [7 A 


Orchestration and E - EE ο. - 
management = ; 


Each with its own quirks, SLAs, 
pricing schemes and lockin risks. 


In a regulatory environment that is 
becoming ever increasingly stringent. 


Runtime EEE Er ee eee ace 
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Provisioning 


* © © 


PCI DSS AICPA SOC GDPR 


Observability SSES | — Sc ae ras 


* Source: cncf.io PIPEDA HIPAA 


On average, DevOps teams use between 10 and 15 tools 


Developers 
bring their 
code, we bring 
the rest 


Platform.sh offers a unified, secure, 
enterprise-grade platform for 
responsibly building, running and 
scaling fleets of websites and 
applications. 
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What you do What Platform.sh does @ 5 


© 
e Packaging e 
Provisioning Deploying 
© © 
Infrastructure Testing 
as code 
ern i Si 9 
He m Data 
om, Management 
Insert code ——> N 
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Access Scaling 
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Compliance Operations 


Security 


From 
Monoliths to 
anything.. v 
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Just an app, but API first + Microservices 
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Composable 
Cloud 
Infrastructure 


Frontend (Next.js) 
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Global consumer goods company 
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Backend ecommerce (Symfony) 
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php 


Backend CMS (Strapi) 
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Microservice (Koa.js) 
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About 43,300 results (0.31 seconds) 


"simplify platform.sh" X ff) à 


Q All © Shopping El Images DJ Videos [| News : More Tools 


About 0 results (0.29 seconds) 


build ) 
anything 
together 


Thank you! — 


Chief Strategy Officer, 
Platform.sh 


platform.sh = 


